I don't think you understood what I was trying to convey. Let me try again.
Your Bungee server should have your node's public ip allocated to it in the panel.
Any servers that don't need to see other containers should have 127.0.0.1 allocated to them so they can access the outside internet but not see other containers.
In your Bungeecord Configuration AND in PreventPortBypass's Configuration you'll use 172.18.0.1 as the IP and put the port of the server. You do not use 127.0.0.1 in PreventPortBypass's Configuration. If you have any doubt as to where a connection is coming from you can use the ppb debug command and when a player tries to join it will print the source address they are coming from in console.
If you have a server in your bungee that is on a second node you'll allocate 127.0.0.1 to that server, but in Bungee's Config and in the Server's PreventPortBypass Config you'll use your first node's public ipv4 address as the IP.